This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft File: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft (raw, json) Hash identifier: dHbcJSLOuncDakfBLNXU7ub1Pq/sQZoZlvv8mcNE7kI= Subject key identifier: 22:E7:A3:B3:AD:90:87:44:1E:8A:73:FF:7E:28:D0:0D:D3:1F:91:D2 Authority key identifier: DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF Certificate issuer: /CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Certificate serial: 119DBE4B89A822AC0B1A6E28828BD2AB9581A5C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft Manifest number: 01C8 Signing time: Sun 25 Jan 2026 13:31:42 +0000 Manifest this update: Sun 25 Jan 2026 13:26:42 +0000 Manifest next update: Wed 28 Jan 2026 22:13:42 +0000 Files and hashes: 1: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl (hash: q9ieedkfH9QjX87WXQsX4cZ4M6AoRc2nOr8EzeqfHcs=) 2: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: XpfKRKn/aePFL2Um700oqFvEnzDkELByApcE+JeDEyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:9d:be:4b:89:a8:22:ac:0b:1a:6e:28:82:8b:d2:ab:95:81:a5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Validity Not Before: Jan 25 13:26:42 2026 GMT Not After : Jan 28 22:13:42 2026 GMT Subject: CN=22E7A3B3AD9087441E8A73FF7E28D00DD31F91D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:98:42:b1:87:16:2c:56:b4:a3:00:99:45:7d: a3:34:13:b9:f5:52:1d:32:6b:c0:38:27:43:39:b6: 93:2c:65:0f:20:75:61:85:ce:43:11:14:87:df:8d: 9d:7e:e2:ee:f8:7c:61:34:9c:40:e1:ef:90:47:50: 56:f3:5d:32:a5:02:59:73:30:9d:0b:84:07:e7:0d: 03:98:14:23:30:f0:79:02:e4:5c:f5:04:17:a6:03: 4c:3d:1e:08:51:fc:b9:a7:36:b1:1e:91:16:f9:de: fb:d0:ca:e0:e3:db:35:eb:d6:c6:6d:08:30:f8:99: a1:5a:88:7b:4b:22:a8:89:3a:ae:10:a4:86:1b:5f: 24:86:34:73:88:a2:26:41:4a:f4:50:29:f6:86:a8: 09:49:cd:ae:35:52:91:1e:37:65:d1:7f:c4:e8:3d: 93:4d:43:b1:a0:09:bb:28:d3:4f:61:bd:d8:dc:f5: e7:28:dc:37:f4:ee:7a:69:4c:e4:83:ea:c6:57:2d: 8c:24:4a:46:74:77:a8:1f:3a:ec:57:35:88:df:bc: 4d:73:1b:3a:d0:64:75:ec:ed:8d:fb:c1:fc:14:5a: 59:67:3a:9d:a3:ba:aa:0c:e4:97:94:3c:ac:16:8b: 16:6d:16:a0:66:78:c8:40:92:97:3d:60:fe:ab:f9: 11:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E7:A3:B3:AD:90:87:44:1E:8A:73:FF:7E:28:D0:0D:D3:1F:91:D2 X509v3 Authority Key Identifier: keyid:DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:3b:77:d9:09:fd:56:24:a0:d9:97:7d:f3:ef:20:4e:b1:f0: 26:93:75:87:c7:8f:c9:9b:a7:e2:c4:a4:01:ea:27:77:08:8b: f7:28:70:98:01:49:a1:96:0e:3b:2c:46:25:00:77:48:39:90: 31:4d:42:9b:c5:0a:ca:6d:c2:f2:5c:98:fa:65:92:77:24:ea: f5:7a:97:4c:08:f8:f4:c2:47:3e:70:d5:a7:77:51:35:56:4a: c6:7a:f0:f5:1c:e2:6d:ad:16:8d:e1:f0:28:9d:19:5f:7c:e8: 0f:6a:ae:95:ae:0f:05:00:fe:8f:c4:1b:7a:84:d6:c5:b5:c8: 4d:5c:0d:b2:f8:82:50:4b:78:92:99:8f:72:fe:bf:c5:b5:fd: f6:34:af:fc:ab:0a:36:16:0f:63:87:07:84:9d:25:42:1d:eb: c2:14:fd:5c:1f:d3:ce:c6:42:a4:d0:20:3d:81:a0:0b:ec:c4: 36:7f:14:02:94:f2:bf:64:c8:85:ba:34:29:53:b0:d9:c8:3e: fe:00:45:d4:45:8e:20:78:d2:9e:a1:bf:86:0d:4a:d0:25:24: 15:89:1f:44:bb:28:0b:37:f4:e3:db:72:31:c8:40:10:2b:31: 38:53:16:59:08:55:54:ef:a9:71:5f:94:1e:fb:14:5a:3d:f6: 74:05:52:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEZ2+S4moIqwLGm4ogovSq5WBpcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdB OEFDRjFGRjAeFw0yNjAxMjUxMzI2NDJaFw0yNjAxMjgyMjEzNDJaMDMxMTAvBgNV BAMTKDIyRTdBM0IzQUQ5MDg3NDQxRThBNzNGRjdFMjhEMDBERDMxRjkxRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtmEKxhxYsVrSjAJlFfaM0E7n1 Uh0ya8A4J0M5tpMsZQ8gdWGFzkMRFIffjZ1+4u74fGE0nEDh75BHUFbzXTKlAllz MJ0LhAfnDQOYFCMw8HkC5Fz1BBemA0w9HghR/LmnNrEekRb53vvQyuDj2zXr1sZt CDD4maFaiHtLIqiJOq4QpIYbXySGNHOIoiZBSvRQKfaGqAlJza41UpEeN2XRf8To PZNNQ7GgCbso009hvdjc9eco3Df07nppTOSD6sZXLYwkSkZ0d6gfOuxXNYjfvE1z GzrQZHXs7Y37wfwUWllnOp2juqoM5JeUPKwWixZtFqBmeMhAkpc9YP6r+REhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIuejs62Qh0QeinP/fijQDdMfkdIwHwYDVR0j BBgwFoAU3iPuVxgNYbOS3IiFn+ZUx6is8f8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWMxZTJmMy00ZmJkLTQ0YmItODNmMC1iYjVhZmU2NDU3NWUvMC9ERTIzRUU1NzE4 MEQ2MUIzOTJEQzg4ODU5RkU2NTRDN0E4QUNGMUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdBOEFD RjFGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0 QzdBOEFDRjFGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAY7d9kJ/VYkoNmXffPvIE6x8CaTdYfHj8mb p+LEpAHqJ3cIi/cocJgBSaGWDjssRiUAd0g5kDFNQpvFCsptwvJcmPplknck6vV6 l0wI+PTCRz5w1ad3UTVWSsZ68PUc4m2tFo3h8CidGV986A9qrpWuDwUA/o/EG3qE 1sW1yE1cDbL4glBLeJKZj3L+v8W1/fY0r/yrCjYWD2OHB4SdJUId68IU/Vwf087G QqTQID2BoAvsxDZ/FAKU8r9kyIW6NClTsNnIPv4ARdRFjiB40p6hv4YNStAlJBWJ H0S7KAs39OPbcjHIQBArMThTFlkIVVTvqXFflB77FFo99nQFUjU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:47:28 2026 by rpki-client